.

How to delete the logs of MAC address and Host Name changes ?

<<

elglobie

Newbie
Newbie

Posts: 3

Joined: Thu Jul 30, 2009 4:26 pm

Post Sat Jan 02, 2010 5:42 pm

How to delete the logs of MAC address and Host Name changes ?

I did change the MAC address in the registry myself  under Vista.

Someone told me that if I change something directly in the registry, nothing is logged ....

 Assuming that it is logged where in Event Viewer would it be logged ?
Under Windows logs or Application and Services logs ?

  And where is it logged in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog  ?
Last edited by elglobie on Sat Jan 02, 2010 7:43 pm, edited 1 time in total.
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Sat Jan 02, 2010 11:18 pm

Re: How to delete the logs of MAC address and Host Name changes ?

Event Log should not log the change you made, however, there are other ways of getting an idea of what you changed.  One such way is comparing the current registry settings with past registry settings found in your system restore.
~~~~~~~~~~~~~~
Ketchup
<<

elglobie

Newbie
Newbie

Posts: 3

Joined: Thu Jul 30, 2009 4:26 pm

Post Sun Jan 03, 2010 5:44 am

Re: How to delete the logs of MAC address and Host Name changes ?

I have turned off system restore completely  ;D
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Sun Jan 03, 2010 11:50 am

Re: How to delete the logs of MAC address and Host Name changes ?

:)  That's just one way.  My point is that there are ways to find the answer even without logging.  There is always something out there that you don't know.
~~~~~~~~~~~~~~
Ketchup

Return to Forensics

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software